Malicious code in cdk-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa41acb776dbedfe93c37899783a5e54b78017ac31576c798a27eae6b9e9ec89 The package contains code in dist/entry.js and dist/index.js that invokes npm publish programmatically combined with writeFileSync operations — the...

Malicious code in sunden-diak-nulamakuiabn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdb0cd0c4e9d3c4088da2e9205cd396ce278db6ce7d0a417e665ec8245549af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-magellan-commitlint-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11a24862217bc21015f97c25d33c48d507143226879e0071bfb1b7689c60efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc5e96e5aeee9603e7942dc709863b996d9f659b8507ae75edb2d8767eded8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123494 Malicious code in tame_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7758a72cab25a76fe63e86ee5c64678aa40ecad9ab8f7d16396c5814b9b27c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lapis88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2bc4f6ea60cb6950bcf090e332ed08571a53798a97502401aa7bf3a861cacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92499 Malicious code in yanti-kolak88-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4830df5c303766a482c199c413f60259351ffd90596fb3ed182bc32ce943fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasisayur6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be15d18b3732d0cc0453c9d558b97608afca596d17f3e69bd9ed57453944ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77017 Malicious code in bayu-sate16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f99daf59b9f6b91437dbacaf564c680a528a5c53d571fe9aca17f282b14e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gado-gado32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c715f5ec24e48cab4ab9d692102e6df2553b3e9ac41ea5786b4d461d6dfb9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67188 Malicious code in chubby-gold-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838c66da69ef99a58498d05586bad8f14e700e1198178a722875144040f81d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic-gray-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c78fbf4ca73d27ebcc920d9666942e4b8f2d7f8dfd4e5200332e7d8038a1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1a87c7b78dcdd32241d3e92959c989920a3e8d63be022f0eb5b51d5ed43394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63585 Malicious code in iwan-ketoprak89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670c973c801756ab01abe1cbff5a1ecb3cfb3293da9b2cafdd86f53c1db8c226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50889 Malicious code in bambang-kepok59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1d5f34d72d97fa5efb7da9b234cc2f17418c0825b7cc12e83ed31be1867177 The package bambang-kepok59-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in wibowo-kupang23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6210f13d44c0500c85a1a99f2c3ed999b44f3559804e4ae81a0eb66a006d7c89 The package wibowo-kupang23-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...